单项选择题

Regarding a route-based versus policy-based IPsec VPN， which statement is true？（）

A.A route-based VPN generally uses less resources than a policy-based VPN.
B.A route-based VPN cannot have a deny action in a policy； a policy-based VPN can have a deny action.
C.A route-based VPN is better suited for dialup or remote access compared to a policy-based VPN.
D.A route-based VPN uses a policy referencing the IPsec VPN； a policy-based VPN policy does not use apolicy referencing the IPsec VPN

点击查看答案

上一题目录下一题

相关考题

单项选择题

A policy-based IPsec VPN is ideal for which scenario？（）

A.when you want to conserve tunnel resources
B.when the remote peer is a dialup or remote access client
C.when you want to configure a tunnel policy with an action of deny
D.when a dynamic routing protocol such as OSPF must be sent across the VPN

单项选择题

A route-based VPN is required for which scenario？（）

A.when the remote VPN peer is behind a NAT device
B.when multiple networks need to be reached across the tunnel and GRE cannot be used
C.when the remote VPN peer is a dialup or remote access client
D.when a dynamic routing protocol is required across the VPN and GRE cannot be used

单项选择题

Which attribute is optional for IKE phase 2 negotiations？（）

A.proxy-ID
B.phase 2 proposal
C.Diffie-Hellman group key
D.security protocol （ESP or AH）